Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3642481/0F3F4538BE5011F1A7F42E1ECF1D38B0/tMdZdvpSJ85uClDKwIgL6Jbo_S4.mft
File:                     tMdZdvpSJ85uClDKwIgL6Jbo_S4.mft (raw, json)
Hash identifier:          Kf/9NDxwvJdLjBAWwDniGWzn7MOaEGXXPTp2eirQeDg=
Subject key identifier:   87:D7:91:D5:97:8F:56:CF:13:74:F2:4C:43:06:98:D8:8F:E2:3B:7C
Authority key identifier: B4:C7:59:76:FA:52:27:CE:6E:0A:50:CA:C0:88:0B:E8:96:E8:FD:2E
Certificate issuer:       /CN=F3642481AF/serialNumber=B4C75976FA5227CE6E0A50CAC0880BE896E8FD2E
Certificate serial:       18
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/tMdZdvpSJ85uClDKwIgL6Jbo_S4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3642481/0F3F4538BE5011F1A7F42E1ECF1D38B0/tMdZdvpSJ85uClDKwIgL6Jbo_S4.mft
Manifest number:          18
Signing time:             Sun 25 Oct 2026 05:58:29 +0000
Manifest this update:     Sun 25 Oct 2026 05:58:28 +0000
Manifest next update:     Tue 27 Oct 2026 05:58:28 +0000
Files and hashes:         1: tMdZdvpSJ85uClDKwIgL6Jbo_S4.crl (hash: 9u56Hez3SZT3FEG3GDCIZfvVDntOwNlU45rsA9eRp7I=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3642481/0F3F4538BE5011F1A7F42E1ECF1D38B0/tMdZdvpSJ85uClDKwIgL6Jbo_S4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3642481/0F3F4538BE5011F1A7F42E1ECF1D38B0/tMdZdvpSJ85uClDKwIgL6Jbo_S4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/tMdZdvpSJ85uClDKwIgL6Jbo_S4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Oct 2026 00:08:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24 (0x18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3642481AF, serialNumber=B4C75976FA5227CE6E0A50CAC0880BE896E8FD2E
        Validity
            Not Before: Oct 25 05:58:28 2026 GMT
            Not After : Oct 27 05:58:28 2026 GMT
        Subject: CN=6add9a85-bb58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c5:c4:16:6e:3b:fe:d0:bd:a2:31:c8:80:35:
                    41:9c:2b:8a:d1:b8:11:be:46:c3:8b:c0:62:f2:43:
                    af:66:d5:fa:a2:d4:cb:26:3f:fe:39:93:52:c4:0c:
                    0e:d0:a5:37:c9:66:0f:f9:fe:0b:58:7e:09:71:ec:
                    0a:21:5f:5b:fb:55:34:3c:a2:7d:11:5a:42:3f:a9:
                    2c:15:b9:6c:43:3c:1f:b4:73:9b:cf:64:1c:fd:62:
                    45:f5:c0:2d:06:ac:fb:c1:5e:85:a0:09:05:38:08:
                    f4:00:52:54:fa:99:3d:01:d1:1c:ba:cc:7b:61:5d:
                    1e:47:78:ba:35:3e:ad:8a:f9:4f:b7:c5:80:69:49:
                    5e:87:14:0d:9c:e3:0c:67:b2:b5:e6:f5:ff:a9:f6:
                    ab:20:a2:a9:5f:14:c6:6b:b0:11:d2:63:c4:f4:d7:
                    29:12:b3:24:3d:ed:2e:4c:a9:a3:a6:01:e5:e1:a5:
                    20:81:19:cc:d2:37:a0:8e:d4:1d:09:72:2a:0d:d2:
                    3f:d9:9a:92:36:c2:f6:09:6a:38:86:4a:a9:97:a5:
                    db:a2:e8:e3:96:7b:bd:16:15:17:b0:e8:c0:6c:30:
                    61:7e:67:80:c0:0a:41:54:32:b1:f4:1a:0c:bb:2e:
                    6d:2d:0f:7d:b1:ed:66:ed:ec:de:e5:4a:55:58:86:
                    61:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:D7:91:D5:97:8F:56:CF:13:74:F2:4C:43:06:98:D8:8F:E2:3B:7C
            X509v3 Authority Key Identifier:
                keyid:B4:C7:59:76:FA:52:27:CE:6E:0A:50:CA:C0:88:0B:E8:96:E8:FD:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3642481/0F3F4538BE5011F1A7F42E1ECF1D38B0/tMdZdvpSJ85uClDKwIgL6Jbo_S4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/tMdZdvpSJ85uClDKwIgL6Jbo_S4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3642481/0F3F4538BE5011F1A7F42E1ECF1D38B0/tMdZdvpSJ85uClDKwIgL6Jbo_S4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:a4:c4:dc:00:ab:6e:fc:6a:1f:54:45:c2:98:dc:5b:61:bb:
         d6:8c:5c:0b:32:71:d2:72:a1:7d:c7:d2:8b:c0:4d:8e:c1:20:
         3d:c9:a1:f1:61:29:f9:64:48:99:a0:1b:62:07:41:f2:e7:64:
         81:f8:9f:28:3a:f2:22:2e:09:b5:9e:65:a2:a9:3c:6f:1f:64:
         39:d4:0f:83:12:cb:73:ac:ea:54:2e:dc:d5:64:0f:88:a0:a7:
         38:76:fc:b8:79:3a:36:ad:74:5d:70:c7:44:59:06:ee:d4:59:
         11:86:38:f0:35:92:fa:db:95:7f:16:ba:ac:9c:10:ea:f3:db:
         a8:01:58:b5:08:45:87:21:6f:2b:75:2a:d8:81:0a:bd:8b:33:
         46:2d:5d:72:51:49:e6:b4:b6:50:84:0e:92:65:d5:06:db:de:
         1b:45:d3:26:0e:85:82:b9:cb:b2:27:dc:ea:34:b2:d1:fd:43:
         c5:d5:08:50:1a:bd:83:38:a2:52:9a:4f:ea:1c:3e:df:d0:81:
         69:66:a9:03:92:46:87:00:e6:bb:a6:64:92:9d:c4:54:f4:76:
         be:d9:ef:1b:30:4a:92:d1:25:46:c9:96:ca:e2:7c:ac:eb:ab:
         2a:b4:f9:e9:01:0a:0f:9b:f8:2b:80:09:74:61:87:5c:c0:5b:
         60:0f:40:ea
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgIBGDANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzY0
MjQ4MUFGMTEwLwYDVQQFEyhCNEM3NTk3NkZBNTIyN0NFNkUwQTUwQ0FDMDg4MEJF
ODk2RThGRDJFMB4XDTI2MTAyNTA1NTgyOFoXDTI2MTAyNzA1NTgyOFowGDEWMBQG
A1UEAxMNNmFkZDlhODUtYmI1ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAL3FxBZuO/7QvaIxyIA1QZwritG4Eb5Gw4vAYvJDr2bV+qLUyyY//jmTUsQM
DtClN8lmD/n+C1h+CXHsCiFfW/tVNDyifRFaQj+pLBW5bEM8H7Rzm89kHP1iRfXA
LQas+8FehaAJBTgI9ABSVPqZPQHRHLrMe2FdHkd4ujU+rYr5T7fFgGlJXocUDZzj
DGeyteb1/6n2qyCiqV8UxmuwEdJjxPTXKRKzJD3tLkypo6YB5eGlIIEZzNI3oI7U
HQlyKg3SP9makjbC9glqOIZKqZel26Lo45Z7vRYVF7DowGwwYX5ngMAKQVQysfQa
DLsubS0PfbHtZu3s3uVKVViGYRUCAwEAAaOCArgwggK0MB0GA1UdDgQWBBSH15HV
l49WzxN08kxDBpjYj+I7fDAfBgNVHSMEGDAWgBS0x1l2+lInzm4KUMrAiAvoluj9
LjAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2NDI0ODEvMEYzRjQ1MzhCRTUwMTFGMUE3RjQyRTFFQ0YxRDM4QjAvdE1kWmR2
cFNKODV1Q2xES3dJZ0w2SmJvX1M0LmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvdE1kWmR2cFNKODV1Q2xES3dJZ0w2SmJvX1M0LmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB1QYIKwYBBQUHAQsEgcgwgcUwgYsGCCsGAQUF
BzALhn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY0MjQ4MS8wRjNGNDUzOEJFNTAxMUYxQTdGNDJFMUVDRjFE
MzhCMC90TWRaZHZwU0o4NXVDbERLd0lnTDZKYm9fUzQubWZ0MDUGCCsGAQUFBzAN
hilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwDQYJKoZIhvcNAQELBQADggEBABOkxNwAq278ah9URcKY3Fthu9aMXAsy
cdJyoX3H0ovATY7BID3JofFhKflkSJmgG2IHQfLnZIH4nyg68iIuCbWeZaKpPG8f
ZDnUD4MSy3Os6lQu3NVkD4igpzh2/Lh5OjatdF1wx0RZBu7UWRGGOPA1kvrblX8W
uqycEOrz26gBWLUIRYchbyt1KtiBCr2LM0YtXXJRSea0tlCEDpJl1Qbb3htF0yYO
hYK5y7In3Oo0stH9Q8XVCFAavYM4olKaT+ocPt/QgWlmqQOSRocA5rumZJKdxFT0
dr7Z7xswSpLRJUbJlsrifKzrqyq0+ekBCg+b+CuACXRhh1zAW2APQOo=
-----END CERTIFICATE-----